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AMENDMENTS TO THE CLAIMS 

Please amend the claims as follows. 

1. (Currently Amended) A method for displaying a web based user interface over a network 
comprising: 

reading an HTTP request for authentication from a browser associated with a user, said 

HTTP request comprising credential information associated with said user; 
invoking a first plug-in module from a plurality of plug-in modules used to authenticate said 

user, said invoking based on said credential information, said plurality of plug-in 

modules providing authentication services; and 
dynamically generating an authentication user interface based on said HTTP request and 

configuration properties defined by said first plug-in modul e, wherein dynamically 

generating said authentication user interface comprises: 

selecting a first web page template from a plurality of web page templates based on 
said credential information and said configuration properties: 

retrieving additional information fi-om memory to be displayed in said first web page 
template, wherein said first web page template comprises said authentication 
user interface: and 

incorporating said additional information into said first web page template, 
wherein said authentication user interface is customized by modifying said first web page 
template, [[;]] and 

wherein customizing said authentication user interface is customized by adding at least one 
additional plug-in module in said plurality of plug-in modules. 

2. (Cancelled) 

3. (Currentiy Amended) The method of Claim [[2]] i, further comprising: 

configuring said first web page template with precompiled tag library components for 
rendering content in said authentication user interface 



4. (Cancelled) 
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5. (Cancelled) 

6. (Previously Presented) The method of Claim 1, wherein reading an HTTP request for 
authentication further comprises: 

receiving said HTTP request over said network from said user, said HTTP request 
comprising a login request to authenticate said user. 

7. (Original) The method of Claim 6, wherein said login request comprises: 

URL information; and 

query information comprising at least one URL parameter attached to said URL information, 
said query information comprising said credential information. 

8. (Original) The method of Claim 1 , further comprising: 

sending said authentication user interface to said browser over said network. 

9. (Previously Presented) The method of Claim 1 , fiirther comprising: 

validating authentication of said user; and 

generating a session token associated with said user, said session token authorizing access to 
services and content by said user, said session token also comprising said credential 
information and any additional credential information discovered when 
authenticating said user. 
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10. (Currently Amended) A method for displaying a web based graphical user interface (GUI) over 
a network comprising: 

receiving an HTTP request for a first service from a browser associated with a user, said 
HTTP request comprising credential information associated with said user; 

invoking a first plug-in module from a plurality of plug-in modules, said invoking based on 
said credential information, said plurality of plug-in modules providing a plurality of 
services; 

dynamically generating a first web based GUI based on said HTTP request and 
configuration properties defined by said first plug-in modul e, wherein dynamically 
generating the first web based GUI fijrther comprises: 
detecting a client type of said browser; and 

configuring said first web based GUI to be supportable by said chent type : 
requesting additional credential information from said user; 
receiving said additional credential information from said user; and 

dynamically generating a second web based GUI based on said additional credential 
information and said configuration properties. 

1 1 . (Original) The method of Claim 10, wherein said first service is an authentication service. 

12. (Cancelled) 

13. (Cancelled) 

14. (Currently Amended) The method of Claim 10, wherein said receiving an HTTP request, said 
invoking a first plug-in module and said dynamically generating [[a]] said first web based GUI 
complies with tiie J2EE Assisted Take-Off (JATO) specification. 

15. (Original) The method of Claim 10, fijrther comprising: 

customizing said first GUI by modifying said configuration properties in said first plug-in 
module. 
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16. (Original) The method of Claim 10, further comprising: 

sending said GUI to said browser. 

17. (Original) A system for displaying a web based user interface over a network comprising: 

a web based user interface module for receiving an HTTP request over said network and 
dynamically generating a first user interface based on said HTTP request and 
configuration properties of a selected plug-in module; 

a plurality of plug-in modules coupled to said web based user interface module, each of said 
plurality of plug-in modules providing web services; and 

a model module coupled to said web based user interface module and said plurality of plug- 
in modules, said model module for selecting said selected plug-in module based on 
said HTTP request and for providing an interface between said web based user 
interface module and said plurality of plug-in modules. 

18. (Original) The system of Claim 17, wherein said web based user interface module comprises: 

a controller for selecting a first view renderer module fi-om a plurality of view renderer 
modules based on credential information provided in said HTTP request, said 
credential information associated with a user sending said HTTP request; 

said plurality of view renderer modules coupled to said controller, each of said plurality of 
view renderer modules controlling the distribution of content to a plurality of web 
page templates; and 

said plurality of web page templates. 
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19. (Original) The system of Claim 17, wherein said model module comprises: 

an application program interface (API) layer for interfacing with said web based user 
interface; 

an service provider interface (SPI) layer coupled to said plurality of plug-in modules for 

interfacing with said plurality of plug-in modules; 
a Java Authenticating and Authorization Service (JAAS) API layer coupled to said API layer 

for providing server authentication services; 
a JAAS service provider interface (SPI) layer coupled to said SPI layer for providing an 

interface between said plurality of plug-in modules and said JAAS API; and 
a framework layer for interfacing between said API layers and said SPI layers. 
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20. (Currently Amended) A computer system comprising: 

a processor; and 

a computer readable memory coupled to said processor and containing program instructions 
that, when executed, implement a method for displaying a web based user interface 

over a network comprising: 

reading an HTTP request for authentication from a browser associated with a user, 
said HTTP request comprising credential information associated with said 
user; 

invoking a first plug-in module from a plurality of plug-in modules used to 
authenticate said user, said invoking based on said credential information, 
said plurality of plug-in modules providing authentication services; and 
dynamically generating an authentication user interface based on said HTTP request 
and configuration properties defined by said first plug-in modul e, wherein 
dynamically generating said authentication user interface comprises: 
selecting a first web page template from a plurality of web page templates 
based on said credential information and said configuration 
properties; 

retrieving additional information &om memory to be displayed in said first 
web page template, wherein said first web page template comprises 
said user interface; and 
incorporating said additional information into said first web page template, 
wherein said authentication user interface is customized by modifying said first web 

page template, [[;]] and 
wherein eu s tomizing said authentication user interface is customized by adding at 
least one additional plug-in module in said plurality of plug-in modules. 

21. (Cancelled) 
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22. (Currently Amended) The computer system of Claim [[21]] 20, wherein said method further 
comprises: 

configuring said first web page template with precompiled tag library components for 
rendering content in said authentication user interface. 

23. (Cancelled) 

24. (Cancelled) 

25. (Currently Amended) The computer system of Claim 20, wherein reading [[an]] said HTTP 
request for authentication further comprises; 

receiving said HTTP request over said network from said user, said HTTP request 
comprising a login request to authenticate said user. 

26. (Original) The computer system of Claim 25, wherein said login request comprises: 

URL information; and 

query information comprising at least one URL parameter attached to said URL information, 
said query information comprising said credential information, 

27. (Original) The computer system of Claim 20, wherein said method further comprises: 

sending said authentication user interface to said browser over said network. 

28. (Previously Presented) The computer system of Claim 20, wherein said method further 
comprises: 

validating authentication of said user; and 

generating a session token associated with said user, said session token authorizing access to 
services and content by said user, said session token also comprising said credential 
information discovered when authenticating said user. 
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29. (Currently Amended) A method for displaying a web based user interface over a network 
comprising: 

reading an HTTP request for authentication from a browser associated with a user, said 

HTTP request comprising credential information associated with said user; 
invoking a first plug-in module from a plurality of plug-in modules used to authenticate said 
user, said invoking based on said credential information, said plurality of plug-in 
modules providing authentication services; 
dynamically generating an authentication user interface based on said HTTP request and 
configuration properties defined by said first plug-in module, wherein dynamically 
generating [[an]] said authentication user interface comprises: 
selecting a first web page template from a plurality of web page templates based on 

said credential information and said configuration properties; 
retrieving additional information from memory to be displayed in said first web page 
template, wherein said first web page template comprises said user interface; 
and 

incorporating said additional information into said first web page template; and 
configuring said first web page template with precompiled tag library components for 
rendering content in said authentication user interface. 

30. (Previously Presented) The method of Claim 29, fiirther comprising: 

customizing said authentication user interface by modifying at least one of said plurality of 
web page templates. 

31. (Previously Presented) The method of Claim 29, wherein reading an HTTP request for 
authentication further comprises: 

receiving said HTTP request over said network from said user, said HTTP request 
comprising a login request to authenticate said user. 



9 



